General
- Target jaffacakes118_1 3 0 7A341 Restore rar.exe
- Size 10.4MB
- Sample260910-d3j7qsx1ev
- SHA256 85fa2fe87e64d105c7658832fe4bcf075ee18ee1ee0e5558d8e0ccb3272e8990
- MD5 671683e089f8a63668a8b380724c805d
- SHA1 4372a3eac1da0c74128b3b0e78c5c486838b7e9c
- SHA512 342ef830141cef9ee0cdf724f0367016797a2cdfbe55a7dd41b5d4e29aacdec7e16184ed62bd069b08ceb30d8c0122b540547947d99ede4bcc3f26108b84377a
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHv0:YX/KeBR/hly4YVYP
- TLSH T1D7B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_1 3 0 7A341 Restore rar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_1 3 0 7A341 Restore rar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_1 3 0 7A341 Restore rar.exe
- Size 10.4MB
- SHA256 85fa2fe87e64d105c7658832fe4bcf075ee18ee1ee0e5558d8e0ccb3272e8990
- MD5 671683e089f8a63668a8b380724c805d
- SHA1 4372a3eac1da0c74128b3b0e78c5c486838b7e9c
- SHA512 342ef830141cef9ee0cdf724f0367016797a2cdfbe55a7dd41b5d4e29aacdec7e16184ed62bd069b08ceb30d8c0122b540547947d99ede4bcc3f26108b84377a
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHv0:YX/KeBR/hly4YVYP
- TLSH T1D7B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext